Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/323030313a313239343a3a2f33322d3332203d3e203238313832.roa
File: 323030313a313239343a3a2f33322d3332203d3e203238313832.roa (raw, json)
Hash identifier: JcSPYY1P+fp86ZF9qzOHM5sjFm1R501e1LweI76iYao=
Subject key identifier: 4A:13:29:14:FB:AB:D5:19:D2:8A:8C:82:0D:E5:00:F2:E7:A9:E5:1D
Certificate issuer: /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial: 35C3FC0472CE63DD62E55EFC1266DF347FB34274
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/323030313a313239343a3a2f33322d3332203d3e203238313832.roa
Signing time: Wed 17 Apr 2024 11:39:50 +0000
ROA not before: Wed 17 Apr 2024 11:34:50 +0000
ROA not after: Wed 16 Apr 2025 11:39:50 +0000
asID: 28182
IP address blocks: 2001:1294::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:c3:fc:04:72:ce:63:dd:62:e5:5e:fc:12:66:df:34:7f:b3:42:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Validity
Not Before: Apr 17 11:34:50 2024 GMT
Not After : Apr 16 11:39:50 2025 GMT
Subject: CN=4A132914FBABD519D28A8C820DE500F2E7A9E51D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d2:db:52:80:e9:3f:09:74:75:ed:32:38:c1:
3c:11:ca:d6:8d:5d:32:dc:7e:12:76:dc:66:4a:dc:
2e:29:8a:68:01:83:67:23:98:af:45:8d:77:ef:19:
31:69:7e:df:d6:4f:4a:bc:a8:ea:3c:fb:e5:84:12:
8c:f3:d5:de:0a:74:f8:23:f0:c7:5d:f0:58:37:9b:
9e:37:6e:e4:f2:05:40:b9:3f:fd:b3:4c:a6:e5:4a:
b4:f0:36:60:9b:42:2b:e1:c4:c8:aa:c8:79:0d:cf:
ce:7b:cd:1e:e6:4d:ed:5d:cf:d4:74:c0:7b:b9:f9:
d9:62:d6:57:0e:e0:05:ee:32:98:2a:0f:bf:aa:91:
69:9c:03:ce:04:ea:03:68:0e:8a:ff:22:83:a4:83:
3f:2d:51:b5:5f:fb:51:31:4d:57:c8:cb:ea:56:37:
27:86:69:cf:26:87:04:13:9d:e5:e6:6b:33:70:81:
85:2b:de:93:99:2d:0e:d2:24:7a:c4:fa:74:94:77:
62:1b:3e:f7:3a:6a:4a:37:f9:c7:b8:0f:4d:ea:77:
1d:a2:ef:0b:67:6f:13:ca:c6:d7:ff:5d:2b:31:74:
ce:24:88:c7:4a:9d:42:b5:a5:c1:f5:5c:2c:35:8c:
cc:82:76:bb:ad:68:d5:df:1e:6e:48:5e:34:7a:bf:
20:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:13:29:14:FB:AB:D5:19:D2:8A:8C:82:0D:E5:00:F2:E7:A9:E5:1D
X509v3 Authority Key Identifier:
keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/323030313a313239343a3a2f33322d3332203d3e203238313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1294::/32
Signature Algorithm: sha256WithRSAEncryption
c2:de:65:24:a9:4d:0c:1d:4e:b4:63:bd:4a:43:17:8e:0c:82:
cb:3b:66:3d:af:92:af:86:a8:6e:f2:2b:17:35:11:a2:7d:4a:
6a:a2:6b:02:8a:d1:c7:7c:3a:e5:e7:c2:d5:67:ca:dc:a2:47:
cd:21:f2:da:3e:44:2d:b9:7c:24:07:70:44:23:c1:c0:a9:aa:
b6:5b:c3:94:c6:e5:fe:f0:0b:81:a5:bd:d0:13:31:05:2a:a2:
dc:57:31:d0:dd:24:5f:f2:19:7d:b9:15:0c:6f:98:3e:d6:7c:
fc:a4:02:32:25:3e:b2:50:69:8d:b1:39:26:47:2f:03:7c:dd:
cd:4c:b8:c4:41:31:31:4d:e4:26:dc:84:c8:ca:26:db:43:64:
5b:36:ff:e3:74:40:c1:8f:c9:4d:e0:cd:32:1f:75:af:09:ea:
31:cf:44:31:2a:a0:fa:f4:92:f7:2d:df:7b:60:ae:28:02:92:
47:d0:20:43:78:75:ae:6d:5b:c4:43:22:ea:a3:a9:17:4d:ca:
1e:54:74:03:ca:30:15:3d:e0:b3:5c:c8:af:2b:3a:95:a2:70:
22:71:42:8d:16:0f:02:65:d2:00:20:79:d1:71:7f:e9:d6:96:
48:db:0a:59:64:67:41:33:11:6f:cf:72:82:f0:3f:f8:ea:6b:
03:55:23:76
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUNcP8BHLOY91i5V78EmbfNH+zQnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhFM0YwQzdCRTRGQTAxNzUyNENFMjI0NEU0QUE4MzYz
NDQ2RkQwRDAeFw0yNDA0MTcxMTM0NTBaFw0yNTA0MTYxMTM5NTBaMDMxMTAvBgNV
BAMTKDRBMTMyOTE0RkJBQkQ1MTlEMjhBOEM4MjBERTUwMEYyRTdBOUU1MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW0ttSgOk/CXR17TI4wTwRytaN
XTLcfhJ23GZK3C4pimgBg2cjmK9FjXfvGTFpft/WT0q8qOo8++WEEozz1d4KdPgj
8Mdd8Fg3m543buTyBUC5P/2zTKblSrTwNmCbQivhxMiqyHkNz857zR7mTe1dz9R0
wHu5+dli1lcO4AXuMpgqD7+qkWmcA84E6gNoDor/IoOkgz8tUbVf+1ExTVfIy+pW
NyeGac8mhwQTneXmazNwgYUr3pOZLQ7SJHrE+nSUd2IbPvc6ako3+ce4D03qdx2i
7wtnbxPKxtf/XSsxdM4kiMdKnUK1pcH1XCw1jMyCdrutaNXfHm5IXjR6vyA5AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUShMpFPur1RnSioyCDeUA8uep5R0wHwYDVR0j
BBgwFoAUaOPwx75PoBdSTOIkTkqoNjRG/Q0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Vqejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJw
NnovMC82OEUzRjBDN0JFNEZBMDE3NTI0Q0UyMjQ0RTRBQTgzNjM0NDZGRDBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RTNGMEM3QkU0RkEwMTc1
MjRDRTIyNDRFNEFBODM2MzQ0NkZEMEQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzAv
MzIzMDMwMzEzYTMxMzIzOTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzODMx
MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACABEpQwDQYJKoZIhvcNAQELBQADggEBAMLeZSSpTQwd
TrRjvUpDF44Mgss7Zj2vkq+GqG7yKxc1EaJ9SmqiawKK0cd8OuXnwtVnytyiR80h
8to+RC25fCQHcEQjwcCpqrZbw5TG5f7wC4GlvdATMQUqotxXMdDdJF/yGX25FQxv
mD7WfPykAjIlPrJQaY2xOSZHLwN83c1MuMRBMTFN5CbchMjKJttDZFs2/+N0QMGP
yU3gzTIfda8J6jHPRDEqoPr0kvct33tgrigCkkfQIEN4da5tW8RDIuqjqRdNyh5U
dAPKMBU94LNcyK8rOpWicCJxQo0WDwJl0gAgedFxf+nWlkjbCllkZ0EzEW/PcoLw
P/jqawNVI3Y=
-----END CERTIFICATE-----
Generated at Fri May 9 12:50:22 2025 by rpki-client